void testFunc ( int a, double b) {

char buf [10]; // line 1

int v1=0; // line 2

gets(buf); // line 3

printf(buf); // line 4

}

a) what is the name of this vulnerability?

b) in which line does it have the vulnerability?

c) what are the two goals of an attacker for exploiting the vulnerability?

d) Assume that both the size of return address and base pointer are two bytes. Give example of an attack input that will overwrite the return address and store attackers code onto the stack. show the stack frame after the overwrite is done.

e) what are the three challenges for the attacker? how the first two challenges are addressed?